Working With Port-Based Vlans - Ruckus Wireless ZoneFlex 2741 User Manual

If an Access Port is configured as an Authenticator, the administrator must define
■
the RADIUS server that the Authenticator will communicate with. All Ethernet ports
of a single AP are configured with the same RADIUS server.
Enable MAC authentication bypass: If MAC authentication bypass is enabled, the
port first attempts to authenticate the attached device by MAC address, and if that
fails, it will try to authenticate the device using 802.1X.

Working with Port-Based VLANs

The Access Point provides options for segmenting all incoming traffic (both wireless
and wired Ethernet traffic) into specific VLANs. There are two ways to segment
incoming traffic into VLANs:
Each of the wireless interfaces (SSIDs) can be configured with a specific Access
■
VLAN ID: (Configuration > Wireless > Wireless [#] > Access VLAN).
Each of the LAN ports can be configured with an Untag VLAN ID (Configuration
■
> Ethernet Ports > VLAN > Untag ID).
For Ethernet ports, the behavior of the Untag VLAN ID depends on the Port Type
selected. If the port is configured as a Trunk port, it will include all VLANs (1-4094) in
its membership. The VLAN Untag ID field (default = 1) can be used to redefine the
"Native VLAN" for the port.
If the Ethernet port is configured as an Access Port, it can be configured with only one
Untag VLAN ID and its membership includes only that one VLAN.
If the Ethernet port is configured as a General Port, it can be configured to include
multiple VLANs in its membership and one Untag VLAN.
Configuring the Access Point
Configuring Ethernet Ports
69